Background:

The global financial system has undergone a rapid digital transformation, placing India’s financial sector at a critical inflection point in cyber risk. The surge in digital finance has significantly expanded the attack surface, with increasingly sophisticated, high-value cyberattacks emerging. Notably, one in five reported cyberattacks in India targets financial institutions, highlighting their heightened vulnerability. Financial intermediation is now deeply tech-driven, relying heavily on big techs, fintechs, and third-party providers. AI- driven phishing, deepfake-enabled fraud, and ransomware-as-a-service have become dominant threats, while supply chain and vendor portal attacks are now key entry points into the BFSI sector. As cybercriminals shift focus from end-users to financial institutions, these risks have direct implications for macro-financial stability. It is crucial to embed cyber risk and resilience into governance and risk management frameworks. A strong understanding of vulnerabilities, controls, and resilience mechanisms is necessary not just for prevention, but for effective response and recovery.

Objective:

This one-day program aims at providing insights into emerging trends in cyber-attacks, response management and digital forensics. It seeks to enhance leadership understanding of cyber risk and resilience from the perspectives of strategy, governance, technology and regulatory compliance.

Program Highlights:

• The following themes will be deliberated upon in the Program:
• Cyber Attacks on the BFSI Sector: Emerging Threat Landscape & Evolving Attack Vectors
• RBI Cybersecurity Guidelines, Supervisory Expectations & Compliance Imperatives
• Digital Platform Risks, Incident Response & Crisis Management: Securing Ecosystems such as TReDS and MSME-Facing Financial Infrastructure, with Frameworks for Swift Containment, Regulatory Reporting & Stakeholder Communication
• Digital Forensics in Financial Institutions: Tools, Techniques and Governance
• AI in Cyber Attack & Cyber Defence: The Double-Edged Sword
• Board Responsibilities in Cyber Risk Governance, Incident Oversight & Institutional Resilience